Patchwire CVEs, their patch status, and feeds to follow them

CVE-2024-8176

Fixed in a distro release EPSS 1%CVSS 7.5

A stack overflow vulnerability exists in the libexpat library due to the way it handles recursive entity expansion in XML documents. When parsing an XML document with deeply nested entity references, libexpat can be forced to recurse indefinitely, exhausting the stack space and causing a crash. This issue could lead to denial of service (DoS) or, in some cases, exploitable memory corruption, depending on the environment and library usage.

Published 2025-03-14 · CVE record · OSV

Products: Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 8.2 Advanced Update Support, Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On, Red Hat Enterprise Linux 8.4 Telecommunications Update Service, Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions, Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.6 Telecommunications Update Service, Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions, Red Hat Enterprise Linux 8.8 Extended Update Support, Red Hat Enterprise Linux 8.8 Telecommunications Update Service, Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions, Red Hat Enterprise Linux 9, Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions, Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions, Red Hat Enterprise Linux 9.4 Extended Update Support, Red Hat JBoss Core Services 2.4.62.SP1, Red Hat DevWorkspace Operator 0.33, Red Hat Discovery 1.14, Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7, Red Hat OpenShift Container Platform 4, Siemens SIMATIC S7-1500 CPU 1518-4 PN/DP MFP, Siemens SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP, Siemens SIPLUS S7-1500 CPU 1518-4 PN/DP MFP, Siemens RUGGEDCOM RST2428P, Siemens SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family, Siemens SCALANCE XCM-/XRM-/XCH-/XRH-300 family

Distro releases

ReleasePackageFixed in
AlmaLinux 10expat2.7.1-1.el10_0
AlmaLinux 10expat-devel2.7.1-1.el10_0
AlmaLinux 8expat2.2.5-17.el8_10
AlmaLinux 8expat-devel2.2.5-17.el8_10
AlmaLinux 8xmlrpc-c1.51.0-11.el8_10
AlmaLinux 8xmlrpc-c-c++1.51.0-11.el8_10
AlmaLinux 8xmlrpc-c-client1.51.0-11.el8_10
AlmaLinux 8xmlrpc-c-client++1.51.0-11.el8_10
AlmaLinux 8xmlrpc-c-devel1.51.0-11.el8_10
AlmaLinux 9expat2.5.0-5.el9_6
AlmaLinux 9expat2.5.0-3.el9_5.3
AlmaLinux 9expat-devel2.5.0-5.el9_6
AlmaLinux 9expat-devel2.5.0-3.el9_5.3
Alpine 3.18expat2.7.0-r0
Alpine 3.19expat2.7.0-r0
Alpine 3.20expat2.7.0-r0
Alpine 3.21expat2.7.0-r0
Alpine 3.22expat2.7.0-r0
Alpine 3.23expat2.7.0-r0
Alpine 3.24expat2.7.0-r0
Amazon Linux 2023xmlrpc-c1.51.08-2.amzn2023.0.2
Amazon Linux 2023xmlrpc-c-apps1.51.08-2.amzn2023.0.2
Amazon Linux 2023xmlrpc-c-c++1.51.08-2.amzn2023.0.2
Amazon Linux 2023xmlrpc-c-client1.51.08-2.amzn2023.0.2
Amazon Linux 2023xmlrpc-c-client++1.51.08-2.amzn2023.0.2
Amazon Linux 2023xmlrpc-c-devel1.51.08-2.amzn2023.0.2
Chainguardexpat2.7.0-r0
Debian 12expat2.5.0-1+deb12u2
Debian 12libxmltokno fix
Debian 13expat2.7.0-1
Debian 14expat2.7.0-1
Red Hat Enterprise Linux 10.0expat0:2.7.1-1.el10_0
Red Hat Enterprise Linux 10.0expat-debuginfo0:2.7.1-1.el10_0
Red Hat Enterprise Linux 10.0expat-debugsource0:2.7.1-1.el10_0
Red Hat Enterprise Linux 10.0expat-devel0:2.7.1-1.el10_0
Red Hat Enterprise Linux 8expat0:2.2.5-17.el8_10
Red Hat Enterprise Linux 8expat-debuginfo0:2.2.5-17.el8_10
Red Hat Enterprise Linux 8expat-debugsource0:2.2.5-17.el8_10
Red Hat Enterprise Linux 8expat-devel0:2.2.5-17.el8_10
Red Hat Enterprise Linux 8xmlrpc-c0:1.51.0-11.el8_10
Red Hat Enterprise Linux 8xmlrpc-c-apps-debuginfo0:1.51.0-11.el8_10
Red Hat Enterprise Linux 8xmlrpc-c-c++0:1.51.0-11.el8_10
Red Hat Enterprise Linux 8xmlrpc-c-c++-debuginfo0:1.51.0-11.el8_10
Red Hat Enterprise Linux 8xmlrpc-c-client0:1.51.0-11.el8_10
Red Hat Enterprise Linux 8xmlrpc-c-client++0:1.51.0-11.el8_10
Red Hat Enterprise Linux 8xmlrpc-c-client++-debuginfo0:1.51.0-11.el8_10
Red Hat Enterprise Linux 8xmlrpc-c-client-debuginfo0:1.51.0-11.el8_10
Red Hat Enterprise Linux 8xmlrpc-c-debuginfo0:1.51.0-11.el8_10
Red Hat Enterprise Linux 8xmlrpc-c-debugsource0:1.51.0-11.el8_10
Red Hat Enterprise Linux 8xmlrpc-c-devel0:1.51.0-11.el8_10
Red Hat Enterprise Linux 9expat0:2.5.0-5.el9_6
Red Hat Enterprise Linux 9expat0:2.5.0-3.el9_5.3
Red Hat Enterprise Linux 9expat-debuginfo0:2.5.0-3.el9_5.3
Red Hat Enterprise Linux 9expat-debuginfo0:2.5.0-5.el9_6
Red Hat Enterprise Linux 9expat-debugsource0:2.5.0-5.el9_6
Red Hat Enterprise Linux 9expat-debugsource0:2.5.0-3.el9_5.3
Red Hat Enterprise Linux 9expat-devel0:2.5.0-3.el9_5.3
Red Hat Enterprise Linux 9expat-devel0:2.5.0-5.el9_6
Red Hat rhel aus 8.2expat0:2.2.10-1.el8_2
Red Hat rhel aus 8.2xmlrpc-c0:1.51.0-5.el8_2.2
Red Hat rhel aus 8.2xmlrpc-c-apps-debuginfo0:1.51.0-5.el8_2.2
Red Hat rhel aus 8.2xmlrpc-c-c++-debuginfo0:1.51.0-5.el8_2.2
Red Hat rhel aus 8.2xmlrpc-c-client0:1.51.0-5.el8_2.2
Red Hat rhel aus 8.2xmlrpc-c-client++-debuginfo0:1.51.0-5.el8_2.2
Red Hat rhel aus 8.2xmlrpc-c-client-debuginfo0:1.51.0-5.el8_2.2
Red Hat rhel aus 8.2xmlrpc-c-debuginfo0:1.51.0-5.el8_2.2
Red Hat rhel aus 8.2xmlrpc-c-debugsource0:1.51.0-5.el8_2.2
Red Hat rhel aus 8.4expat0:2.2.10-1.el8_4
Red Hat rhel aus 8.4xmlrpc-c0:1.51.0-5.el8_4.2
Red Hat rhel aus 8.4xmlrpc-c-apps-debuginfo0:1.51.0-5.el8_4.2
Red Hat rhel aus 8.4xmlrpc-c-c++-debuginfo0:1.51.0-5.el8_4.2
Red Hat rhel aus 8.4xmlrpc-c-client0:1.51.0-5.el8_4.2
Red Hat rhel aus 8.4xmlrpc-c-client++-debuginfo0:1.51.0-5.el8_4.2
Red Hat rhel aus 8.4xmlrpc-c-client-debuginfo0:1.51.0-5.el8_4.2
Red Hat rhel aus 8.4xmlrpc-c-debuginfo0:1.51.0-5.el8_4.2
Red Hat rhel aus 8.4xmlrpc-c-debugsource0:1.51.0-5.el8_4.2
Red Hat rhel aus 8.6expat0:2.2.10-1.el8_6
Red Hat rhel aus 8.6xmlrpc-c0:1.51.0-6.el8_6.1
Red Hat rhel aus 8.6xmlrpc-c-apps-debuginfo0:1.51.0-6.el8_6.1
Red Hat rhel aus 8.6xmlrpc-c-c++-debuginfo0:1.51.0-6.el8_6.1
Red Hat rhel aus 8.6xmlrpc-c-client0:1.51.0-6.el8_6.1
Red Hat rhel aus 8.6xmlrpc-c-client++-debuginfo0:1.51.0-6.el8_6.1
Red Hat rhel aus 8.6xmlrpc-c-client-debuginfo0:1.51.0-6.el8_6.1
Red Hat rhel aus 8.6xmlrpc-c-debuginfo0:1.51.0-6.el8_6.1
Red Hat rhel aus 8.6xmlrpc-c-debugsource0:1.51.0-6.el8_6.1
Red Hat rhel e4s 8.4xmlrpc-c0:1.51.0-5.el8_4.2
Red Hat rhel e4s 8.4xmlrpc-c-apps-debuginfo0:1.51.0-5.el8_4.2
Red Hat rhel e4s 8.4xmlrpc-c-c++-debuginfo0:1.51.0-5.el8_4.2
Red Hat rhel e4s 8.4xmlrpc-c-client0:1.51.0-5.el8_4.2
Red Hat rhel e4s 8.4xmlrpc-c-client++-debuginfo0:1.51.0-5.el8_4.2
Red Hat rhel e4s 8.4xmlrpc-c-client-debuginfo0:1.51.0-5.el8_4.2
Red Hat rhel e4s 8.4xmlrpc-c-debuginfo0:1.51.0-5.el8_4.2
Red Hat rhel e4s 8.4xmlrpc-c-debugsource0:1.51.0-5.el8_4.2
Red Hat rhel e4s 8.6expat0:2.2.10-1.el8_6
Red Hat rhel e4s 8.6xmlrpc-c0:1.51.0-6.el8_6.1
Red Hat rhel e4s 8.6xmlrpc-c-apps-debuginfo0:1.51.0-6.el8_6.1
Red Hat rhel e4s 8.6xmlrpc-c-c++-debuginfo0:1.51.0-6.el8_6.1
Red Hat rhel e4s 8.6xmlrpc-c-client0:1.51.0-6.el8_6.1
Red Hat rhel e4s 8.6xmlrpc-c-client++-debuginfo0:1.51.0-6.el8_6.1
Red Hat rhel e4s 8.6xmlrpc-c-client-debuginfo0:1.51.0-6.el8_6.1
Red Hat rhel e4s 8.6xmlrpc-c-debuginfo0:1.51.0-6.el8_6.1
Red Hat rhel e4s 8.6xmlrpc-c-debugsource0:1.51.0-6.el8_6.1
Red Hat rhel e4s 8.8expat0:2.2.10-1.el8_8
Red Hat rhel e4s 9.0expat0:2.2.10-12.el9_0.4
Red Hat rhel e4s 9.2expat0:2.5.0-1.el9_2.3
Red Hat rhel eus 8.8xmlrpc-c0:1.51.0-8.el8_8.1
Red Hat rhel eus 8.8xmlrpc-c-apps-debuginfo0:1.51.0-8.el8_8.1
Red Hat rhel eus 8.8xmlrpc-c-c++0:1.51.0-8.el8_8.1
Red Hat rhel eus 8.8xmlrpc-c-c++-debuginfo0:1.51.0-8.el8_8.1
Red Hat rhel eus 8.8xmlrpc-c-client0:1.51.0-8.el8_8.1
Red Hat rhel eus 8.8xmlrpc-c-client++0:1.51.0-8.el8_8.1
Red Hat rhel eus 8.8xmlrpc-c-client++-debuginfo0:1.51.0-8.el8_8.1
Red Hat rhel eus 8.8xmlrpc-c-client-debuginfo0:1.51.0-8.el8_8.1
Red Hat rhel eus 8.8xmlrpc-c-debuginfo0:1.51.0-8.el8_8.1
Red Hat rhel eus 8.8xmlrpc-c-debugsource0:1.51.0-8.el8_8.1
Red Hat rhel eus 8.8xmlrpc-c-devel0:1.51.0-8.el8_8.1
Red Hat rhel eus 9.4expat0:2.5.0-2.el9_4.3
Red Hat rhel eus long life 8.4expat0:2.2.10-1.el8_4
Red Hat rhel tus 8.4xmlrpc-c0:1.51.0-5.el8_4.2
Red Hat rhel tus 8.4xmlrpc-c-apps-debuginfo0:1.51.0-5.el8_4.2
Red Hat rhel tus 8.4xmlrpc-c-c++-debuginfo0:1.51.0-5.el8_4.2
Red Hat rhel tus 8.4xmlrpc-c-client0:1.51.0-5.el8_4.2
Red Hat rhel tus 8.4xmlrpc-c-client++-debuginfo0:1.51.0-5.el8_4.2
Red Hat rhel tus 8.4xmlrpc-c-client-debuginfo0:1.51.0-5.el8_4.2
Red Hat rhel tus 8.4xmlrpc-c-debuginfo0:1.51.0-5.el8_4.2
Red Hat rhel tus 8.4xmlrpc-c-debugsource0:1.51.0-5.el8_4.2
Red Hat rhel tus 8.6expat0:2.2.10-1.el8_6
Red Hat rhel tus 8.6xmlrpc-c0:1.51.0-6.el8_6.1
Red Hat rhel tus 8.6xmlrpc-c-apps-debuginfo0:1.51.0-6.el8_6.1
Red Hat rhel tus 8.6xmlrpc-c-c++-debuginfo0:1.51.0-6.el8_6.1
Red Hat rhel tus 8.6xmlrpc-c-client0:1.51.0-6.el8_6.1
Red Hat rhel tus 8.6xmlrpc-c-client++-debuginfo0:1.51.0-6.el8_6.1
Red Hat rhel tus 8.6xmlrpc-c-client-debuginfo0:1.51.0-6.el8_6.1
Red Hat rhel tus 8.6xmlrpc-c-debuginfo0:1.51.0-6.el8_6.1
Red Hat rhel tus 8.6xmlrpc-c-debugsource0:1.51.0-6.el8_6.1
Red Hat rhel tus 8.8expat0:2.2.10-1.el8_8
Rocky Linux 10expat0:2.7.1-1.el10_0
Rocky Linux 8expat0:2.2.5-17.el8_10
Rocky Linux 8xmlrpc-c0:1.51.0-11.el8_10
Rocky Linux 9expat0:2.5.0-3.el9_5.3
SUSE Enterprise Storage 7.1expat2.7.1-150000.3.36.1
SUSE Linux Enterprise High Performance Computing 15 SP3-LTSSexpat2.7.1-150000.3.36.1
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOSexpat2.7.1-150400.3.28.1
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOSexpat2.8.5-150400.3.40.1
SUSE Linux Enterprise High Performance Computing 15 SP4-LTSSexpat2.7.1-150400.3.28.1
SUSE Linux Enterprise High Performance Computing 15 SP4-LTSSexpat2.8.5-150400.3.40.1
SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOSexpat2.7.1-150400.3.28.1
SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOSexpat2.8.5-150400.3.40.1
SUSE Linux Enterprise High Performance Computing 15 SP5-LTSSexpat2.7.1-150400.3.28.1
SUSE Linux Enterprise High Performance Computing 15 SP5-LTSSexpat2.8.5-150400.3.40.1
SUSE Linux Enterprise Micro 5.1expat2.7.1-150000.3.36.1
SUSE Linux Enterprise Micro 5.2expat2.7.1-150000.3.36.1
SUSE Linux Enterprise Micro 5.3expat2.8.5-150400.3.40.1
SUSE Linux Enterprise Micro 5.3expat2.7.1-150400.3.28.1
SUSE Linux Enterprise Micro 5.4expat2.8.5-150400.3.40.1
SUSE Linux Enterprise Micro 5.4expat2.7.1-150400.3.28.1
SUSE Linux Enterprise Micro 5.5expat2.8.5-150400.3.40.1
SUSE Linux Enterprise Micro 5.5expat2.7.1-150400.3.28.1
SUSE Linux Enterprise Module for Basesystem 15 SP6expat2.7.1-150400.3.28.1
SUSE Linux Enterprise Module for Basesystem 15 SP7expat2.7.1-150700.3.3.1
SUSE Linux Enterprise Server 12 SP5-LTSSexpat2.8.5-21.55.1
SUSE Linux Enterprise Server 12 SP5-LTSSexpat2.7.1-21.43.1
SUSE Linux Enterprise Server 15 SP3-LTSSexpat2.7.1-150000.3.36.1
SUSE Linux Enterprise Server 15 SP4-LTSSexpat2.7.1-150400.3.28.1
SUSE Linux Enterprise Server 15 SP4-LTSSexpat2.8.5-150400.3.40.1
SUSE Linux Enterprise Server 15 SP5-LTSSexpat2.8.5-150400.3.40.1
SUSE Linux Enterprise Server 15 SP5-LTSSexpat2.7.1-150400.3.28.1
SUSE Linux Enterprise Server 15 SP6-LTSSexpat2.8.5-150400.3.40.1
SUSE Linux Enterprise Server LTSS Extended Security 12 SP5expat2.7.1-21.43.1
SUSE Linux Enterprise Server LTSS Extended Security 12 SP5expat2.8.5-21.55.1
SUSE Linux Enterprise Server for SAP Applications 15 SP3expat2.7.1-150000.3.36.1
SUSE Linux Enterprise Server for SAP Applications 15 SP4expat2.7.1-150400.3.28.1
SUSE Linux Enterprise Server for SAP Applications 15 SP4expat2.8.5-150400.3.40.1
SUSE Linux Enterprise Server for SAP Applications 15 SP5expat2.7.1-150400.3.28.1
SUSE Linux Enterprise Server for SAP Applications 15 SP5expat2.8.5-150400.3.40.1
SUSE Linux Enterprise Server for SAP Applications 15 SP6expat2.8.5-150400.3.40.1
SUSE Linux Micro 6.0expat2.7.1-1.1
SUSE Linux Micro 6.1expat2.7.1-slfo.1.1_1.1
SUSE Manager Proxy 4.3expat2.7.1-150400.3.28.1
SUSE Manager Server 4.3expat2.7.1-150400.3.28.1
Ubuntu 16.04 LTScadaverno fix
Ubuntu 16.04 LTSgdcmno fix
Ubuntu 16.04 LTSinsighttoolkit4no fix
Ubuntu 16.04 LTSmatanzano fix
Ubuntu 16.04 LTSsmartno fix
Ubuntu 16.04 LTStdomno fix
Ubuntu 16.04 LTSwbxml2no fix
Ubuntu 18.04 LTScadaverno fix
Ubuntu 18.04 LTSgdcmno fix
Ubuntu 18.04 LTSinsighttoolkit4no fix
Ubuntu 18.04 LTSmatanzano fix
Ubuntu 18.04 LTSsmartno fix
Ubuntu 18.04 LTStdomno fix
Ubuntu 18.04 LTSvnc4no fix
Ubuntu 18.04 LTSwbxml2no fix
Ubuntu 20.04 LTScadaverno fix
Ubuntu 20.04 LTSinsighttoolkit4no fix
Ubuntu 20.04 LTSmatanzano fix
Ubuntu 20.04 LTStdomno fix
Ubuntu 20.04 LTSwbxml2no fix
Ubuntu 22.04 LTScadaverno fix
Ubuntu 22.04 LTSexpat2.4.7-1ubuntu0.6
Ubuntu 22.04 LTSinsighttoolkit4no fix
Ubuntu 22.04 LTSmatanzano fix
Ubuntu 22.04 LTStdomno fix
Ubuntu 22.04 LTSwbxml2no fix
Ubuntu 24.04 LTScadaverno fix
Ubuntu 24.04 LTSexpat2.6.1-2ubuntu0.3
Ubuntu 24.04 LTSmatanzano fix
Ubuntu 24.04 LTStdomno fix
Ubuntu 24.04 LTSwbxml2no fix
Ubuntu 25.10cadaverno fix
Ubuntu 25.10expat2.7.1-1
Ubuntu 25.10matanzano fix
Ubuntu 25.10swish-eno fix
Ubuntu 25.10tdomno fix
Ubuntu 25.10wbxml2no fix
Ubuntu 25.10xmlrpc-cno fix
Ubuntu 26.04 LTScadaverno fix
Ubuntu 26.04 LTSmatanzano fix
Ubuntu 26.04 LTStdomno fix
Ubuntu 26.04 LTSwbxml2no fix
Ubuntu 26.04 LTSxmlrpc-cno fix
Ubuntu 26.10cadaverno fix
Ubuntu 26.10matanzano fix
Ubuntu 26.10swish-eno fix
Ubuntu 26.10tdomno fix
Ubuntu 26.10wbxml2no fix
Ubuntu 26.10xmlrpc-cno fix
Ubuntu Pro 14.04 LTScoin3no fix
Ubuntu Pro 14.04 LTSexpatno fix
Ubuntu Pro 14.04 LTSvnc4no fix
Ubuntu Pro 14.04 LTSvtkno fix
Ubuntu Pro 14.04 LTSxmlrpc-cno fix
Ubuntu Pro 16.04 LTSayttmno fix
Ubuntu Pro 16.04 LTScableswigno fix
Ubuntu Pro 16.04 LTScoin3no fix
Ubuntu Pro 16.04 LTSexpatno fix
Ubuntu Pro 16.04 LTSlibxmltokno fix
Ubuntu Pro 16.04 LTSswish-eno fix
Ubuntu Pro 16.04 LTSvnc4no fix
Ubuntu Pro 16.04 LTSvtkno fix
Ubuntu Pro 16.04 LTSxmlrpc-cno fix
Ubuntu Pro 18.04 LTScoin3no fix
Ubuntu Pro 18.04 LTSexpatno fix
Ubuntu Pro 18.04 LTSlibxmltokno fix
Ubuntu Pro 18.04 LTSswish-eno fix
Ubuntu Pro 18.04 LTSxmlrpc-cno fix
Ubuntu Pro 20.04 LTSexpatno fix
Ubuntu Pro 20.04 LTSlibxmltokno fix
Ubuntu Pro 20.04 LTSswish-eno fix
Ubuntu Pro 20.04 LTSxmlrpc-cno fix
Ubuntu Pro 22.04 LTSlibxmltokno fix
Ubuntu Pro 22.04 LTSswish-eno fix
Ubuntu Pro 22.04 LTSxmlrpc-cno fix
Ubuntu Pro 24.04 LTSlibxmltokno fix
Ubuntu Pro 24.04 LTSswish-eno fix
Ubuntu Pro 24.04 LTSxmlrpc-cno fix
Ubuntu Pro 26.04 LTSswish-eno fix
Wolfiexpat2.7.0-r0
openSUSE Leap 15.6expat2.7.1-150400.3.28.1
openSUSE Tumbleweedexpat2.7.1-1.1